CVEvulnerability

CVE-2025-20288

5.3 MEDIUM Published 2025-07-16 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-07-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-918

Description

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device.

Affected configurations

• cisco unified intelligence center 10.5\(1\) • cisco unified intelligence center 11.0\(1\) • cisco unified intelligence center 11.0\(2\) • cisco unified intelligence center 11.0\(3\) • cisco unified intelligence center 11.5\(1\) • cisco unified intelligence center 11.6\(1\) • cisco unified intelligence center 12.0\(1\) • cisco unified intelligence center 12.5\(1\) • cisco unified intelligence center 12.5\(1\)su • cisco unified intelligence center 12.6\(1\) • cisco unified intelligence center 12.6\(1\) es05 et • cisco unified intelligence center 12.6\(1\) et • cisco unified intelligence center 12.6\(2\) • cisco unified contact center express 10.5\(1\) • cisco unified contact center express 10.5\(1\)su1 • cisco unified contact center express 10.5\(1\)su1es10 • cisco unified contact center express 10.6\(1\) • cisco unified contact center express 10.6\(1\)su1 • cisco unified contact center express 10.6\(1\)su2 • cisco unified contact center express 10.6\(1\)su2es04 • cisco unified contact center express 10.6\(1\)su3 • cisco unified contact center express 10.6\(1\)su3es01 • cisco unified contact center express 10.6\(1\)su3es02 • cisco unified contact center express 10.6\(1\)su3es03 • cisco unified contact center express 11.0\(1\)su1 • cisco unified contact center express 11.0\(1\)su1es02 • cisco unified contact center express 11.0\(1\)su1es03 • cisco unified contact center express 11.5\(1\)es01 • cisco unified contact center express 11.5\(1\)su1 • cisco unified contact center express 11.5\(1\)su1es01 • cisco unified contact center express 11.5\(1\)su1es02 • cisco unified contact center express 11.5\(1\)su1es03 • cisco unified contact center express 11.6\(1\) • cisco unified contact center express 11.6\(1\)es01 • cisco unified contact center express 11.6\(1\)es02 • cisco unified contact center express 11.6\(2\) • cisco unified contact center express 11.6\(2\)es01 • cisco unified contact center express 11.6\(2\)es02 • cisco unified contact center express 11.6\(2\)es03 • cisco unified contact center express 11.6\(2\)es04 • cisco unified contact center express 11.6\(2\)es05 • cisco unified contact center express 11.6\(2\)es06 • cisco unified contact center express 11.6\(2\)es07 • cisco unified contact center express 11.6\(2\)es08 • cisco unified contact center express 12.0\(1\) • cisco unified contact center express 12.0\(1\)es01 • cisco unified contact center express 12.0\(1\)es02 • cisco unified contact center express 12.0\(1\)es03 • cisco unified contact center express 12.0\(1\)es04 • cisco unified contact center express 12.5\(1\) • cisco unified contact center express 12.5\(1\) su01 es01 • cisco unified contact center express 12.5\(1\) su01 es02 • cisco unified contact center express 12.5\(1\) su01 es03 • cisco unified contact center express 12.5\(1\) su02 es01 • cisco unified contact center express 12.5\(1\) su02 es02 • cisco unified contact center express 12.5\(1\) su02 es03 • cisco unified contact center express 12.5\(1\) su02 es04 • cisco unified contact center express 12.5\(1\) su03 es01 • cisco unified contact center express 12.5\(1\) su03 es02 • cisco unified contact center express 12.5\(1\) su03 es03 … and 9 more

Related

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References